Privacy Policy

Last updated 9 October 2026

This policy explains what personal information Revia collects, why, who can see it, and the choices you have. We've tried to write it plainly. If anything is unclear, email support@getrevia.in.

1. About Revia

Revia is a digital rehabilitation support platform. It helps patients follow home exercise plans prescribed by their physiotherapist or other qualified clinician, and helps clinicians review their patients' progress. Revia does not diagnose conditions or provide medical treatment — see our Medical Disclaimer.

In these documents, “Revia”, “we”, “us”, and “our” refer to the Revia service and its operator. For privacy questions or requests, contact support@getrevia.in.

2. Who can use Revia

Revia is currently available only to people aged 18 or over. We do not knowingly collect information from anyone under 18. If you believe a person under 18 has created an account, contact us and we will act on it.

3. Information we collect

Account information (patients and clinicians)

Your name and email address.
Your password, which is handled by our authentication provider and stored in hashed form — we never see it in plain text.
Your account type (patient, clinician applicant or clinician) and when the account was created.
A record that you accepted the required legal terms and statements when you signed up or applied: which document or statement, the version you accepted, and the date and time of acceptance.

Clinician application information

If you apply for clinician access, we collect what we need to review your application manually:

Your full legal or professional name, phone number, qualification, and city.
Your professional registration or licence number and your clinic or organisation.
Optionally, a professional website and a short note about your qualifications.
The outcome of the review (pending, approved or not approved), when it was decided, and any reason given.

We do not ask for identity documents, certificates or photographs at this stage.

Rehabilitation information (patients)

The shoulder you are rehabilitating (left, right, both, or not sure), if you tell us.
The rehabilitation plan your clinician prescribes: exercises, target movement ranges, sets, repetitions, how many days a week, and any written instructions.
Your workout and session history: which exercise and activity you used, sets and repetitions completed, durations, dates and times, whether a session was completed or partial, and activity scores or distances.
How each session was performed. Sessions controlled with a keyboard are recorded as simulated, and are never presented as measured movement.
Feedback your clinician writes to you, and whether your clinician has reviewed a session.

Clinician–patient connections

When a patient enters a clinician's Doctor ID, we record the connection request and its history: when it was requested, accepted, declined or ended. A Doctor ID only identifies a clinician; it does not grant anyone access by itself.

Technical information

Necessary authentication cookies that keep you signed in securely. Revia does not use advertising or analytics cookies.
Your browser may also store a small amount of app state needed for Revia to work (for example, which demonstration mode is active). It does not hold your rehabilitation records.
When you sign in, create an account or request a password reset, Cloudflare Turnstile checks that the request comes from a person rather than an automated program. To do this, Cloudflare processes technical information such as your IP address and browser characteristics.
Our hosting and database providers keep standard server and security logs (such as IP addresses and request times) to operate and protect the service.

4. How we use information

To create and secure your account, sign you in, and send account emails such as email confirmation and password resets.
To show patients their plan, progress and session history, and to let a connected clinician prescribe exercises, review sessions and send feedback.
To review clinician applications and decide whether to grant clinician access.
To prevent abuse, fraud and unauthorised access, and to keep the service reliable.
To respond to your questions and requests.
To meet legal obligations.

What we don't do

We do not sell personal information.
We do not use your information for advertising or advertising profiling.
We do not currently use analytics or tracking tools.

5. Who can see patient information

You. Patients can see their own plan, sessions, progress and feedback.
Your connected clinician. Only an approved clinician whose connection request you made and who accepted it can see your rehabilitation information, and only while the connection is active. While your request is waiting for a response, the clinician can see only your name and the shoulder you are rehabilitating, so they can decide whether to accept it.
After a connection ends. When a connection ends, that clinician can no longer see your information or send you feedback. Your own history stays in your account: ending a connection does not delete your sessions, feedback or past plans.
Other clinicians and patients cannot see your information.
Revia. A small number of authorised people who operate Revia may access information when necessary to run, secure or support the service, to review clinician applications, or to respond to your requests.

Clinicians who use Revia are independent practitioners, not Revia employees. Only accounts that Revia has manually approved receive clinician access. Approval reflects our review of the information provided; it is not a guarantee of a clinician's competence or of any treatment outcome.

6. Service providers

We use a small number of providers to run Revia. They process information on our behalf, only to provide their service:

Supabase — database, authentication and account storage.
Vercel — website hosting and delivery.
Resend — delivery of account emails such as confirmations and password resets.
Cloudflare Turnstile — abuse prevention on sign-in, sign-up and password reset.

These providers may process information in countries other than your own.

7. How long we keep information

Revia retains personal information only for as long as reasonably necessary to provide the service, maintain security, resolve disputes, and satisfy applicable legal obligations.

Ending a clinician connection does not automatically erase historical records; your history remains in your account.
Clinician application records, including decisions, are kept as a history of the review.
Legal or security obligations may require us to keep limited information for a period even after an account is deleted.

8. Your choices and requests

Correction. If your account information is inaccurate, email us and we will correct it. Your rehabilitation plan is set by your clinician, so ask them about changes to it.
A copy of your information. Email support@getrevia.in from the address you sign in with, or use “Request my data” in your account.
Deletion. Email us from the address you sign in with, or use “Request account deletion” in your account. We may need to verify your identity first. Deletion is not always immediate, and some information may be kept where the law requires it.
Ending a connection. Ending a connection with a clinician stops their access to your information without deleting your own records. You can disconnect an active clinician directly from your Revia account (Profile → Disconnect clinician). If you need help, email support@getrevia.in.

Please don't include health details in emails beyond what is needed for your request.

9. Security

We protect information with measures such as encrypted connections (HTTPS), hashed passwords, database access rules that limit each account to the information it is allowed to see, abuse prevention on account forms, and restricted administrative access. No online service can guarantee absolute security, but we work to protect your information and will act promptly if we learn of a problem.

10. Changes to this policy

We may update this policy as Revia changes. We will update the date at the top, and for significant changes we will give notice in the app or by email before they take effect.

11. Contact

For privacy questions or requests, contact us at support@getrevia.in.